This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/7y9hj1vi8evyxMWsiJIGH1_53AM.roa File: 7y9hj1vi8evyxMWsiJIGH1_53AM.roa (raw, json) Hash identifier: Q69uQTzaOq7UQxdu+Czlq7rx75YhJrEs8hTR3Ul9WN0= Subject key identifier: EF:2F:61:8F:5B:E2:F1:EB:F2:C4:C5:AC:88:92:06:1F:5F:F9:DC:03 Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3 Certificate serial: 019B7C80D8D647174D3D9ED2AD9519F3750E Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/7y9hj1vi8evyxMWsiJIGH1_53AM.roa Signing time: Fri 02 Jan 2026 02:19:37 +0000 ROA not before: Fri 02 Jan 2026 02:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34958 IP address blocks: 193.43.215.0/24 maxlen: 24 193.189.147.0/24 maxlen: 24 2001:67c:25e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d8:d6:47:17:4d:3d:9e:d2:ad:95:19:f3:75:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef2f618f5be2f1ebf2c4c5ac8892061f5ff9dc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:e0:fb:5d:ab:68:67:d6:d1:55:91:46:64: 33:04:82:51:ae:b7:8c:09:0d:52:2b:73:03:94:eb: 7f:8e:c4:28:77:72:69:6a:7b:b9:3b:09:8f:d3:73: b9:54:bd:81:28:0e:7a:b1:ba:24:53:fc:4d:a2:f8: 72:3f:44:b6:83:07:ff:4c:fb:24:a5:b0:88:94:9c: c0:8d:f0:f8:5c:00:44:ed:df:e0:ed:82:45:72:f8: 20:1d:7c:76:7c:14:5d:7f:de:8e:1c:91:08:0a:b1: 4a:a4:5d:0c:8f:c8:47:d1:e9:d4:b1:6a:3e:e8:9d: 22:6a:0b:a0:3b:b6:1e:c3:57:3b:d0:2f:3f:72:ec: 66:07:98:9c:49:b2:fa:24:11:e3:ad:69:d6:0b:a2: 3c:a4:7d:ea:88:6f:74:f5:18:48:ef:59:77:57:88: 97:31:92:b6:e6:99:4d:95:5b:7a:e6:cb:5b:29:c7: 4c:50:7b:15:58:a1:f8:83:b8:10:35:d6:da:ca:4f: f3:7d:51:8c:f9:a9:d6:87:d6:54:a9:3b:66:99:82: cb:58:9f:b1:5c:ee:da:a8:35:09:0b:36:fa:5e:f7: a6:34:cf:32:82:b5:83:46:8f:af:c2:c3:e6:bb:74: 54:f5:4e:7d:f9:25:4f:d0:2f:b6:75:dc:32:e1:f2: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2F:61:8F:5B:E2:F1:EB:F2:C4:C5:AC:88:92:06:1F:5F:F9:DC:03 X509v3 Authority Key Identifier: keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/7y9hj1vi8evyxMWsiJIGH1_53AM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.215.0/24 193.189.147.0/24 IPv6: 2001:67c:25e8::/48 Signature Algorithm: sha256WithRSAEncryption b0:be:59:80:23:22:07:1b:41:0c:42:e5:46:18:17:fd:e7:ce: 96:57:9c:6a:c0:4c:1c:27:08:20:0b:ec:9f:0f:83:c9:0a:11: 81:f3:cd:bb:23:63:39:58:20:a1:2d:36:f9:88:e8:d1:e4:96: 25:b7:4d:de:e0:70:a0:e3:7e:a2:69:5d:0c:d8:23:0c:7d:09: 58:dc:f0:4d:d2:05:86:9a:ef:30:88:ab:21:58:55:7d:91:f7: 93:2d:9b:83:5e:11:68:fb:2d:7c:7c:ab:80:e3:06:5a:48:52: 65:0a:40:99:bc:40:e9:89:9d:11:64:1a:42:9e:dc:df:d5:b4: c3:ce:06:cf:7f:6b:04:ab:a4:35:1f:7e:23:c4:5a:1b:1f:17: 3a:1a:65:41:43:14:0d:d3:7d:4a:f6:b4:84:1a:43:20:85:1a: b3:f9:6e:4c:4c:07:eb:b2:8a:e2:c4:1c:48:12:6b:16:05:8a: 61:5e:e9:50:da:41:76:ee:97:e5:9b:c6:97:2b:4e:61:ab:ec: f0:12:b1:5a:fa:f4:2e:f4:59:08:c4:d4:ef:e5:03:c9:57:97: 04:e3:be:2c:97:71:e8:77:fc:a3:62:da:bc:8e:59:e5:ca:64: fa:17:5c:68:ad:ff:98:59:27:4b:a8:c6:66:28:f7:e9:71:35: 81:8c:ed:f3 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8gNjWRxdNPZ7SrZUZ83UOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDg5ZmUxYzdlMjBhMGIwYzYzODQyYzQ1YzE2YzU3NjMx Nzg1ZDMwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjJmNjE4ZjViZTJmMWViZjJjNGM1YWM4ODkyMDYxZjVmZjlkYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14Lg+12raGfW0VWRRmQzBIJRrreM CQ1SK3MDlOt/jsQod3Jpanu5OwmP03O5VL2BKA56sbokU/xNovhyP0S2gwf/TPsk pbCIlJzAjfD4XABE7d/g7YJFcvggHXx2fBRdf96OHJEICrFKpF0Mj8hH0enUsWo+ 6J0iagugO7Yew1c70C8/cuxmB5icSbL6JBHjrWnWC6I8pH3qiG909RhI71l3V4iX MZK25plNlVt65stbKcdMUHsVWKH4g7gQNdbayk/zfVGM+anWh9ZUqTtmmYLLWJ+x XO7aqDUJCzb6XvemNM8ygrWDRo+vwsPmu3RU9U59+SVP0C+2ddwy4fIi5wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFO8vYY9b4vHr8sTFrIiSBh9f+dwDMB8GA1UdIwQY MBaAFG5In+HH4goLDGOELEXBbFdjF4XTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjIt ZDg4NjkzMTE0OTlhLzEvN3k5aGoxdmk4ZXZ5eE1Xc2lKSUdIMV81M0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjItZDg4NjkzMTE0OTlh LzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwSvXAwQA wb2TMA8EAgACMAkDBwAgAQZ8JegwDQYJKoZIhvcNAQELBQADggEBALC+WYAjIgcb QQxC5UYYF/3nzpZXnGrATBwnCCAL7J8Pg8kKEYHzzbsjYzlYIKEtNvmI6NHkliW3 Td7gcKDjfqJpXQzYIwx9CVjc8E3SBYaa7zCIqyFYVX2R95Mtm4NeEWj7LXx8q4Dj BlpIUmUKQJm8QOmJnRFkGkKe3N/VtMPOBs9/awSrpDUffiPEWhsfFzoaZUFDFA3T fUr2tIQaQyCFGrP5bkxMB+uyiuLEHEgSaxYFimFe6VDaQXbul+WbxpcrTmGr7PAS sVr69C70WQjE1O/lA8lXlwTjviyXceh3/KNi2ryOWeXKZPoXXGit/5hZJ0uoxmYo 9+lxNYGM7fM= -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:16 2026 by rpki-client